Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
File: s2DwCXvkgcIbsdUchdRPZXQViqk.mft (raw, json)
Hash identifier: Qo7beEgSfpxKFh5S+PPw4ECzFTKusq529hv5thB2cWw=
Subject key identifier: A4:01:8C:72:B5:96:3F:BE:1E:45:A1:A7:EE:43:EA:8B:F0:23:9F:15
Authority key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
Certificate issuer: /CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Certificate serial: 01A0D0EE440434D4D8FFBFFE40577A615711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
Manifest number: 0ADE
Signing time: Thu 24 Sep 2026 01:01:10 +0000
Manifest this update: Thu 24 Sep 2026 01:01:10 +0000
Manifest next update: Fri 25 Sep 2026 01:01:10 +0000
Files and hashes: 1: BP8ohZBcj6NcqBRjGc25QgNrnnI.roa (hash: 395UmkLig0TCCb9njfR7+pVbNAtUDBDAYXAZ0wdHK9o=)
2: ew71Dr2hxhH6I9_RZhH0lsluIig.roa (hash: 0cm9urifI/2Uh0AOprLssITUSaMSxFAaeqTRzg9iNI0=)
3: jCJ22Fdf8SnbI8DcZqU35nF2Zew.roa (hash: JVckqbft6dBMO2AzO5LhlxSJUFnZrQ2XDuU3MVU82uA=)
4: s2DwCXvkgcIbsdUchdRPZXQViqk.crl (hash: eAsivw3fq7CvrAFYAmRI/b+HUb40sBdPCWrkLWqHaZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ee:44:04:34:d4:d8:ff:bf:fe:40:57:7a:61:57:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Validity
Not Before: Sep 24 01:01:10 2026 GMT
Not After : Sep 25 01:01:10 2026 GMT
Subject: CN=a4018c72b5963fbe1e45a1a7ee43ea8bf0239f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:66:c9:10:bc:92:02:59:a8:11:94:59:a0:c1:
4d:27:d4:b6:48:97:35:86:16:ee:17:c5:bd:96:74:
1b:b1:c9:a2:e8:2a:d4:c1:36:d0:76:3d:e2:f7:67:
5d:9a:80:38:07:7e:07:ff:15:1e:8a:01:57:97:74:
88:06:cf:25:51:07:b3:96:56:8f:6a:0e:59:aa:1d:
a3:6d:e3:f4:f8:73:c5:3c:33:fd:81:de:36:fc:23:
c8:96:1b:eb:e6:65:5b:d7:75:40:51:40:28:72:ca:
83:c3:b2:a8:da:79:26:d3:8e:82:63:2b:eb:06:00:
24:2e:1c:1a:61:b1:d2:0f:82:30:c7:7b:2c:28:5b:
36:40:9b:25:75:49:eb:5a:b1:24:b6:d0:b8:ee:86:
6d:44:61:3e:f4:82:d2:0d:82:1d:77:a8:f0:a7:14:
2c:fc:88:89:c8:2c:b7:05:90:23:c6:cb:60:fd:db:
3f:85:53:89:ed:4e:17:97:7b:31:8a:a6:e3:7c:e0:
57:fc:21:64:df:22:63:cb:53:98:a5:34:eb:8f:5a:
2a:84:ba:2a:21:84:a4:a6:72:8f:ba:a1:a6:42:d2:
14:1f:2f:b3:67:61:0e:3f:be:78:87:c3:61:fc:b6:
01:03:d4:ff:c0:ba:1a:3b:95:e9:6c:9c:c1:b6:29:
dc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:01:8C:72:B5:96:3F:BE:1E:45:A1:A7:EE:43:EA:8B:F0:23:9F:15
X509v3 Authority Key Identifier:
keyid:B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d4:db:8b:0d:dd:1b:3d:86:65:c5:44:d9:53:31:64:d2:50:
a1:6e:69:d3:46:27:4c:92:47:83:01:57:d0:87:fa:a2:ac:ac:
e4:8d:d7:c5:a5:e0:bb:dc:f4:2d:f5:14:7c:6e:51:ce:4a:e0:
99:a5:48:61:55:aa:c8:74:65:91:d3:32:16:be:47:09:d7:d0:
62:dd:e9:77:b5:ab:00:59:ab:95:19:bd:47:32:81:11:f3:48:
85:4a:77:cb:08:0d:76:4c:8f:d9:30:07:fb:fc:71:08:3e:ab:
2a:5f:9f:7d:c0:97:e1:85:66:33:ec:35:f6:ce:e0:10:2e:f7:
a3:df:9b:39:44:95:21:8a:2e:df:f2:17:17:b1:70:12:9d:d0:
aa:ed:6b:50:83:85:1d:f4:8a:38:e5:1b:4d:6f:85:c2:4d:f6:
a7:f0:70:d4:9a:cd:c2:71:43:61:1d:85:9a:03:90:15:61:e0:
42:a2:60:7a:c0:4d:c5:59:33:f9:78:ba:4b:af:7e:e0:ce:e3:
63:ad:cb:70:87:45:5d:83:8d:31:54:b3:92:24:5e:51:c4:34:
7c:12:6e:a7:f7:b7:97:7b:d2:bf:3b:48:9d:1e:4f:24:e4:65:
88:a5:f0:66:0c:83:db:0a:e8:8e:19:e9:8d:08:ed:19:3b:98:
3f:9e:43:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:42:58 2026 by rpki-client